@nextclaw/server 0.12.6 → 0.12.7

package/dist/index.d.ts

@@ -798,6 +798,12 @@ type AgentBindingView = {
 type SessionConfigView = {
   dmScope?: "main" | "per-peer" | "per-channel-peer" | "per-account-channel-peer";
 };
+type RuntimeEntryView = {
+  enabled?: boolean;
+  label?: string;
+  type: string;
+  config?: Record<string, unknown>;
+};
 type SessionEntryView = {
   key: string;
   createdAt: string;
@@ -882,6 +888,15 @@ type ServerPathBrowseView = {
   breadcrumbs: ServerPathBreadcrumbView[];
   entries: ServerPathEntryView[];
 };
+type ServerPathReadView = {
+  requestedPath: string;
+  resolvedPath: string;
+  kind: "text" | "markdown" | "binary";
+  sizeBytes: number;
+  truncated: boolean;
+  text?: string;
+  languageHint?: string | null;
+};
 type CronScheduleView = {
   kind: "at";
   atMs?: number | null;
@@ -952,6 +967,9 @@ type RuntimeConfigUpdate = {
       engine?: string;
       engineConfig?: Record<string, unknown>;
     };
+    runtimes?: {
+      entries?: Record<string, RuntimeEntryView> | null;
+    };
     list?: AgentProfileView[];
   };
   bindings?: AgentBindingView[];
@@ -1040,6 +1058,9 @@ type ConfigView = {
       contextTokens?: number;
       maxToolIterations?: number;
     };
+    runtimes?: {
+      entries?: Record<string, RuntimeEntryView>;
+    };
     list?: AgentProfileView[];
     context?: {
       bootstrap?: {
@@ -1327,4 +1348,4 @@ declare function getUiBridgeSecretPath(): string;
 declare function readUiBridgeSecret(): string | null;
 declare function ensureUiBridgeSecret(): string;
 //#endregion
-export { AgentBindingView, AgentCreateRequest, AgentDeleteResult, AgentProfileView, AgentUpdateRequest, ApiError, ApiResponse, AppMetaView, AuthEnabledUpdateRequest, AuthLoginRequest, AuthPasswordUpdateRequest, AuthSetupRequest, AuthStatusView, BindingPeerView, BochaFreshnessValue, BootstrapPhase, BootstrapRemoteState, BootstrapStageState, BootstrapStatusView, ChannelAuthPollRequest, ChannelAuthPollResult, ChannelAuthStartRequest, ChannelAuthStartResult, ChannelSpecView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, ConfigActionExecuteRequest, ConfigActionExecuteResult, ConfigActionManifest, ConfigActionType, ConfigMetaView, ConfigSchemaResponse, ConfigUiHint, ConfigUiHints, ConfigView, CronActionResult, CronCreateRequest, CronCreateResult, CronEnableRequest, CronJobStateView, CronJobView, CronListView, CronPayloadView, CronRunRequest, CronScheduleView, DEFAULT_SESSION_TYPE, MarketplaceApiConfig, MarketplaceInstallKind, MarketplaceInstallSkillParams, MarketplaceInstallSpec, MarketplaceInstalledRecord, MarketplaceInstalledView, MarketplaceInstaller, MarketplaceItemSummary, MarketplaceItemType, MarketplaceItemView, MarketplaceListView, MarketplaceLocalizedTextMap, MarketplaceMcpContentView, MarketplaceMcpDoctorResult, MarketplaceMcpInstallKind, MarketplaceMcpInstallRequest, MarketplaceMcpInstallResult, MarketplaceMcpInstallSpec, MarketplaceMcpManageAction, MarketplaceMcpManageRequest, MarketplaceMcpManageResult, MarketplaceMcpTemplateInput, MarketplacePluginContentView, MarketplacePluginInstallKind, MarketplacePluginInstallRequest, MarketplacePluginInstallResult, MarketplacePluginManageAction, MarketplacePluginManageRequest, MarketplacePluginManageResult, MarketplaceRecommendationView, MarketplaceSkillContentView, MarketplaceSkillInstallKind, MarketplaceSkillInstallRequest, MarketplaceSkillInstallResult, MarketplaceSkillManageAction, MarketplaceSkillManageRequest, MarketplaceSkillManageResult, MarketplaceSort, NcpSessionSkillsView, ProviderAuthImportResult, ProviderAuthPollRequest, ProviderAuthPollResult, ProviderAuthStartRequest, ProviderAuthStartResult, ProviderConfigUpdate, ProviderConfigView, ProviderConnectionTestRequest, ProviderConnectionTestResult, ProviderCreateRequest, ProviderCreateResult, ProviderDeleteResult, ProviderSpecView, RemoteAccessView, RemoteAccountProfileUpdateRequest, RemoteAccountView, RemoteBrowserAuthPollRequest, RemoteBrowserAuthPollResult, RemoteBrowserAuthStartRequest, RemoteBrowserAuthStartResult, RemoteDoctorCheckView, RemoteDoctorView, RemoteLoginRequest, RemoteRuntimeView, RemoteServiceAction, RemoteServiceActionResult, RemoteServiceView, RemoteSettingsUpdateRequest, RemoteSettingsView, RuntimeActionCapability, RuntimeActionImpact, RuntimeConfigUpdate, RuntimeControlAction, RuntimeControlActionResult, RuntimeControlEnvironment, RuntimeControlView, RuntimeLifecycleState, RuntimeServiceState, SearchConfigUpdate, SearchConfigView, SearchProviderConfigView, SearchProviderName, SearchProviderSpecView, SecretProviderEnvView, SecretProviderExecView, SecretProviderFileView, SecretProviderView, SecretRefView, SecretSourceView, SecretsConfigUpdate, SecretsView, ServerPathBreadcrumbView, ServerPathBrowseView, ServerPathEntryView, SessionConfigView, SessionEntryView, SessionEventView, SessionHistoryView, SessionMessageView, SessionPatchUpdate, SessionPatchValidationError, SessionSkillEntryView, SessionTypeDescribeParams, SessionsListView, TavilySearchDepthValue, UiNcpAgent, UiNcpAssetPutView, UiNcpAssetView, UiNcpSessionListView, UiNcpSessionMessagesView, UiNcpSessionService, UiNcpStoredAssetRecord, type UiRemoteAccessHost, type UiRuntimeControlHost, UiServerEvent, UiServerHandle, UiServerOptions, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, deleteSession, ensureUiBridgeSecret, executeConfigAction, getSessionHistory, getUiBridgeSecretPath, listSessions, loadConfigOrDefault, patchSession, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };
+export { AgentBindingView, AgentCreateRequest, AgentDeleteResult, AgentProfileView, AgentUpdateRequest, ApiError, ApiResponse, AppMetaView, AuthEnabledUpdateRequest, AuthLoginRequest, AuthPasswordUpdateRequest, AuthSetupRequest, AuthStatusView, BindingPeerView, BochaFreshnessValue, BootstrapPhase, BootstrapRemoteState, BootstrapStageState, BootstrapStatusView, ChannelAuthPollRequest, ChannelAuthPollResult, ChannelAuthStartRequest, ChannelAuthStartResult, ChannelSpecView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, ConfigActionExecuteRequest, ConfigActionExecuteResult, ConfigActionManifest, ConfigActionType, ConfigMetaView, ConfigSchemaResponse, ConfigUiHint, ConfigUiHints, ConfigView, CronActionResult, CronCreateRequest, CronCreateResult, CronEnableRequest, CronJobStateView, CronJobView, CronListView, CronPayloadView, CronRunRequest, CronScheduleView, DEFAULT_SESSION_TYPE, MarketplaceApiConfig, MarketplaceInstallKind, MarketplaceInstallSkillParams, MarketplaceInstallSpec, MarketplaceInstalledRecord, MarketplaceInstalledView, MarketplaceInstaller, MarketplaceItemSummary, MarketplaceItemType, MarketplaceItemView, MarketplaceListView, MarketplaceLocalizedTextMap, MarketplaceMcpContentView, MarketplaceMcpDoctorResult, MarketplaceMcpInstallKind, MarketplaceMcpInstallRequest, MarketplaceMcpInstallResult, MarketplaceMcpInstallSpec, MarketplaceMcpManageAction, MarketplaceMcpManageRequest, MarketplaceMcpManageResult, MarketplaceMcpTemplateInput, MarketplacePluginContentView, MarketplacePluginInstallKind, MarketplacePluginInstallRequest, MarketplacePluginInstallResult, MarketplacePluginManageAction, MarketplacePluginManageRequest, MarketplacePluginManageResult, MarketplaceRecommendationView, MarketplaceSkillContentView, MarketplaceSkillInstallKind, MarketplaceSkillInstallRequest, MarketplaceSkillInstallResult, MarketplaceSkillManageAction, MarketplaceSkillManageRequest, MarketplaceSkillManageResult, MarketplaceSort, NcpSessionSkillsView, ProviderAuthImportResult, ProviderAuthPollRequest, ProviderAuthPollResult, ProviderAuthStartRequest, ProviderAuthStartResult, ProviderConfigUpdate, ProviderConfigView, ProviderConnectionTestRequest, ProviderConnectionTestResult, ProviderCreateRequest, ProviderCreateResult, ProviderDeleteResult, ProviderSpecView, RemoteAccessView, RemoteAccountProfileUpdateRequest, RemoteAccountView, RemoteBrowserAuthPollRequest, RemoteBrowserAuthPollResult, RemoteBrowserAuthStartRequest, RemoteBrowserAuthStartResult, RemoteDoctorCheckView, RemoteDoctorView, RemoteLoginRequest, RemoteRuntimeView, RemoteServiceAction, RemoteServiceActionResult, RemoteServiceView, RemoteSettingsUpdateRequest, RemoteSettingsView, RuntimeActionCapability, RuntimeActionImpact, RuntimeConfigUpdate, RuntimeControlAction, RuntimeControlActionResult, RuntimeControlEnvironment, RuntimeControlView, RuntimeEntryView, RuntimeLifecycleState, RuntimeServiceState, SearchConfigUpdate, SearchConfigView, SearchProviderConfigView, SearchProviderName, SearchProviderSpecView, SecretProviderEnvView, SecretProviderExecView, SecretProviderFileView, SecretProviderView, SecretRefView, SecretSourceView, SecretsConfigUpdate, SecretsView, ServerPathBreadcrumbView, ServerPathBrowseView, ServerPathEntryView, ServerPathReadView, SessionConfigView, SessionEntryView, SessionEventView, SessionHistoryView, SessionMessageView, SessionPatchUpdate, SessionPatchValidationError, SessionSkillEntryView, SessionTypeDescribeParams, SessionsListView, TavilySearchDepthValue, UiNcpAgent, UiNcpAssetPutView, UiNcpAssetView, UiNcpSessionListView, UiNcpSessionMessagesView, UiNcpSessionService, UiNcpStoredAssetRecord, type UiRemoteAccessHost, type UiRuntimeControlHost, UiServerEvent, UiServerHandle, UiServerOptions, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, deleteSession, ensureUiBridgeSecret, executeConfigAction, getSessionHistory, getUiBridgeSecretPath, listSessions, loadConfigOrDefault, patchSession, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };

package/dist/index.js

@@ -3,8 +3,8 @@ import { compress } from "hono/compress";
 import { serve } from "@hono/node-server";
 import { WebSocket, WebSocketServer } from "ws";
 import fs, { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { readFile, readdir, realpath, stat } from "node:fs/promises";
-import path, { dirname, isAbsolute, join, parse, resolve } from "node:path";
+import { open, readFile, readdir, realpath, stat } from "node:fs/promises";
+import path, { dirname, extname, isAbsolute, join, parse, resolve } from "node:path";
 import * as NextclawCore from "@nextclaw/core";
 import { ConfigSchema, DEFAULT_WORKSPACE_PATH, LiteLLMProvider, SessionManager, buildConfigSchema, createAgentProfile, expandHome, findEffectiveAgentProfile, getDataDir, getPackageVersion, getProviderName, getWorkspacePathFromConfig, hasSecretRef, isSensitiveConfigPath, loadConfig, normalizeThinkingLevels, parseThinkingLevel, probeFeishu, readAgentAvatarContent, removeAgentProfile, resolveEffectiveAgentProfiles, saveConfig, updateAgentProfile } from "@nextclaw/core";
 import { createHash, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
@@ -1331,7 +1331,7 @@ function buildConfigView(config, options) {
 	const providers = {};
 	for (const [name, provider] of Object.entries(config.providers)) providers[name] = toProviderView(config, provider, name, uiHints, findServerBuiltinProviderByName(name));
 	return {
-		agents: config.agents,
+		agents: sanitizePublicConfigValue(config.agents, "agents", uiHints),
 		providers,
 		search: buildSearchView(config),
 		channels: sanitizePublicConfigValue(projectedChannels, "channels", uiHints),
@@ -1348,6 +1348,40 @@ function buildConfigView(config, options) {
 		}
 	};
 }
+function normalizeRuntimeEntries(entries) {
+	if (!entries || typeof entries !== "object" || Array.isArray(entries)) return {};
+	const normalized = {};
+	for (const [rawId, rawEntry] of Object.entries(entries)) {
+		const id = rawId.trim();
+		if (!id || !rawEntry || typeof rawEntry !== "object" || Array.isArray(rawEntry)) continue;
+		const entry = rawEntry;
+		const type = normalizeOptionalString(entry.type);
+		if (!type) continue;
+		normalized[id] = {
+			enabled: typeof entry.enabled === "boolean" ? entry.enabled : true,
+			...normalizeOptionalString(entry.label) ? { label: normalizeOptionalString(entry.label) ?? void 0 } : {},
+			type,
+			config: normalizeRuntimeEntryConfig(type, entry.config && typeof entry.config === "object" && !Array.isArray(entry.config) ? entry.config : {})
+		};
+	}
+	return normalized;
+}
+function normalizeRuntimeEntryConfig(type, config) {
+	if (type !== "narp-stdio") return { ...config };
+	const command = normalizeOptionalString(config.command);
+	const cwd = normalizeOptionalString(config.cwd);
+	return {
+		wireDialect: normalizeOptionalString(config.wireDialect) ?? "acp",
+		processScope: normalizeOptionalString(config.processScope) ?? "per-session",
+		...command ? { command } : {},
+		...normalizeStringArray(config.args) ? { args: normalizeStringArray(config.args) } : {},
+		env: normalizeUnknownStringRecord(config.env) ?? {},
+		...cwd ? { cwd } : {},
+		startupTimeoutMs: normalizePositiveInteger(config.startupTimeoutMs) ?? 8e3,
+		probeTimeoutMs: normalizePositiveInteger(config.probeTimeoutMs) ?? 3e3,
+		requestTimeoutMs: normalizePositiveInteger(config.requestTimeoutMs) ?? 12e4
+	};
+}
 function clearSecretRef(config, path) {
 	if (config.secrets.refs[path]) delete config.secrets.refs[path];
 }
@@ -1545,6 +1579,22 @@ function normalizeOptionalString(value) {
 	const trimmed = value.trim();
 	return trimmed.length > 0 ? trimmed : null;
 }
+function normalizePositiveInteger(value) {
+	const parsed = typeof value === "number" ? value : typeof value === "string" ? Number.parseInt(value, 10) : NaN;
+	if (!Number.isFinite(parsed)) return null;
+	const normalized = Math.trunc(parsed);
+	return normalized > 0 ? normalized : null;
+}
+function normalizeStringArray(value) {
+	if (!Array.isArray(value)) return null;
+	const entries = value.map((entry) => normalizeOptionalString(entry)).filter((entry) => Boolean(entry));
+	return entries.length > 0 ? entries : null;
+}
+function normalizeUnknownStringRecord(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+	const entries = Object.entries(value).map(([key, entryValue]) => [key.trim(), normalizeOptionalString(entryValue)]).filter(([key, entryValue]) => key.length > 0 && Boolean(entryValue));
+	return entries.length > 0 ? Object.fromEntries(entries) : null;
+}
 function normalizeHeaders(input) {
 	if (!input) return null;
 	const entries = Object.entries(input).map(([key, value]) => [key.trim(), String(value ?? "").trim()]).filter(([key, value]) => key.length > 0 && value.length > 0);
@@ -1858,6 +1908,7 @@ function updateRuntime(configPath, patch) {
 			...hasEngineConfig ? { engineConfig: { ...entry.engineConfig } } : {}
 		};
 	});
+	if (patch.agents?.runtimes && Object.prototype.hasOwnProperty.call(patch.agents.runtimes, "entries")) config.agents.runtimes.entries = normalizeRuntimeEntries(patch.agents.runtimes.entries);
 	if (Object.prototype.hasOwnProperty.call(patch, "bindings")) config.bindings = patch.bindings ?? [];
 	if (patch.session) config.session = {
 		...config.session,
@@ -2591,6 +2642,7 @@ var ConfigRoutesController = class {
 		if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "contextTokens")) changedPaths.push("agents.defaults.contextTokens");
 		if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "engine")) changedPaths.push("agents.defaults.engine");
 		if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "engineConfig")) changedPaths.push("agents.defaults.engineConfig");
+		if (body.data.agents?.runtimes && Object.prototype.hasOwnProperty.call(body.data.agents.runtimes, "entries")) changedPaths.push("agents.runtimes.entries");
 		changedPaths.push("agents.list", "bindings", "session");
 		await this.publishConfigUpdates(changedPaths);
 		return c.json(ok(result));
@@ -4476,6 +4528,139 @@ function isServerPathBrowseError(error) {
 	return error instanceof ServerPathBrowseError;
 }
 //#endregion
+//#region src/ui/server-path/server-path-read.utils.ts
+const DEFAULT_PREVIEW_MAX_BYTES = 2e5;
+const MARKDOWN_EXTENSIONS = new Set([
+	".md",
+	".mdx",
+	".markdown"
+]);
+const TEXT_EXTENSIONS = new Set([
+	".c",
+	".cc",
+	".conf",
+	".cpp",
+	".css",
+	".csv",
+	".env",
+	".go",
+	".graphql",
+	".h",
+	".hpp",
+	".html",
+	".ini",
+	".java",
+	".js",
+	".json",
+	".jsx",
+	".log",
+	".mjs",
+	".py",
+	".rb",
+	".rs",
+	".sh",
+	".sql",
+	".svg",
+	".toml",
+	".ts",
+	".tsx",
+	".txt",
+	".xml",
+	".yaml",
+	".yml"
+]);
+var ServerPathReadError = class extends Error {
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+		this.name = "ServerPathReadError";
+	}
+};
+function normalizeReadPath(params) {
+	const { basePath, path } = params;
+	const rawPath = typeof path === "string" ? path.trim() : "";
+	const normalizedBasePath = typeof basePath === "string" ? basePath.trim() : "";
+	if (!rawPath) return resolve(expandHome(normalizedBasePath || homedir()));
+	const expandedPath = expandHome(rawPath);
+	if (expandedPath.startsWith("/")) return resolve(expandedPath);
+	if (!normalizedBasePath) throw new ServerPathReadError("SERVER_PATH_BASE_REQUIRED", "relative server path requires a base path");
+	return resolve(expandHome(normalizedBasePath), expandedPath);
+}
+function inferPreviewKind(path) {
+	const extension = extname(path).toLowerCase();
+	if (MARKDOWN_EXTENSIONS.has(extension)) return "markdown";
+	if (TEXT_EXTENSIONS.has(extension)) return "text";
+	return "binary";
+}
+function isLikelyTextBuffer(buffer) {
+	for (const byte of buffer) if (byte === 0) return false;
+	return true;
+}
+function readLanguageHint(path) {
+	const extension = extname(path).toLowerCase();
+	if (!extension) return null;
+	if (MARKDOWN_EXTENSIONS.has(extension)) return "markdown";
+	return extension.slice(1) || null;
+}
+async function readFilePreviewBytes(params) {
+	const { maxBytes, resolvedPath, sizeBytes } = params;
+	const bytesToRead = Math.min(sizeBytes, maxBytes);
+	const fileHandle = await open(resolvedPath, "r");
+	try {
+		const buffer = Buffer.alloc(bytesToRead);
+		const { bytesRead } = await fileHandle.read(buffer, 0, bytesToRead, 0);
+		return {
+			buffer: buffer.subarray(0, bytesRead),
+			truncated: sizeBytes > maxBytes
+		};
+	} finally {
+		await fileHandle.close();
+	}
+}
+async function readServerPath(options = {}) {
+	const requestedPath = typeof options.path === "string" ? options.path.trim() : "";
+	const resolvedPath = normalizeReadPath(options);
+	let resolvedStats;
+	try {
+		resolvedStats = await stat(resolvedPath);
+	} catch {
+		throw new ServerPathReadError("SERVER_PATH_NOT_FOUND", "server path does not exist");
+	}
+	if (!resolvedStats.isFile()) throw new ServerPathReadError("SERVER_PATH_NOT_FILE", "server path must point to a file");
+	let previewBytes;
+	try {
+		previewBytes = await readFilePreviewBytes({
+			resolvedPath,
+			sizeBytes: resolvedStats.size,
+			maxBytes: options.maxBytes ?? DEFAULT_PREVIEW_MAX_BYTES
+		});
+	} catch {
+		throw new ServerPathReadError("SERVER_PATH_NOT_READABLE", "server path is not readable");
+	}
+	const inferredKind = inferPreviewKind(resolvedPath);
+	const resolvedKind = inferredKind === "binary" && isLikelyTextBuffer(previewBytes.buffer) ? "text" : inferredKind;
+	if (resolvedKind === "binary") return {
+		requestedPath: requestedPath || resolvedPath,
+		resolvedPath,
+		kind: "binary",
+		sizeBytes: resolvedStats.size,
+		truncated: previewBytes.truncated,
+		languageHint: readLanguageHint(resolvedPath)
+	};
+	return {
+		requestedPath: requestedPath || resolvedPath,
+		resolvedPath,
+		kind: resolvedKind,
+		sizeBytes: resolvedStats.size,
+		truncated: previewBytes.truncated,
+		text: previewBytes.buffer.toString("utf8"),
+		languageHint: readLanguageHint(resolvedPath)
+	};
+}
+function isServerPathReadError(error) {
+	return error instanceof ServerPathReadError;
+}
+//#endregion
 //#region src/ui/ui-routes/server-path.controller.ts
 function readIncludeFilesFlag(value) {
 	return value === "1" || value === "true";
@@ -4493,6 +4678,18 @@ var ServerPathRoutesController = class {
 			throw error;
 		}
 	};
+	read = async (c) => {
+		try {
+			const payload = await readServerPath({
+				path: c.req.query("path"),
+				basePath: c.req.query("basePath")
+			});
+			return c.json(ok(payload));
+		} catch (error) {
+			if (isServerPathReadError(error)) return c.json(err(error.code, error.message), 400);
+			throw error;
+		}
+	};
 };
 //#endregion
 //#region src/ui/router.ts
@@ -4543,6 +4740,7 @@ function registerNcpSessionRoutes(app, ncpSessionController) {
 }
 function registerServerPathRoutes(app, serverPathController) {
 	app.get("/api/server-paths/browse", serverPathController.browse);
+	app.get("/api/server-paths/read", serverPathController.read);
 }
 function registerNcpRuntimeRoutes(app, options, ncpAssetController) {
 	if (!options.ncpAgent) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/server",
-  "version": "0.12.6",
+  "version": "0.12.7",
   "private": false,
   "description": "Nextclaw UI/API server.",
   "type": "module",
@@ -18,12 +18,12 @@
     "@hono/node-server": "^1.13.3",
     "hono": "^4.6.2",
     "ws": "^8.18.0",
-    "@nextclaw/core": "0.12.6",
-    "@nextclaw/mcp": "0.1.71",
-    "@nextclaw/ncp-http-agent-server": "0.3.13",
-    "@nextclaw/openclaw-compat": "1.0.6",
-    "@nextclaw/ncp": "0.5.1",
-    "@nextclaw/runtime": "0.2.38"
+    "@nextclaw/core": "0.12.7",
+    "@nextclaw/openclaw-compat": "1.0.7",
+    "@nextclaw/ncp": "0.5.2",
+    "@nextclaw/ncp-http-agent-server": "0.3.14",
+    "@nextclaw/mcp": "0.1.72",
+    "@nextclaw/runtime": "0.2.39"
   },
   "devDependencies": {
     "@types/node": "^20.17.6",